finally shakes hands with parse, and takes the proper auth token